The Agent Skills Directory

[PROMPT_INJECTION]: The skill facilitates reading content from Google Docs, which introduces a surface for indirect prompt injection. Malicious instructions embedded in a document could potentially influence the agent's behavior.
Ingestion points: The documents get method allows the agent to retrieve external document content.
Boundary markers: Absent; there are no delimiters or instructions to treat the document content as data rather than instructions.
Capability inventory: The skill uses the gws binary to perform shell commands for reading and writing documents.
Sanitization: No sanitization or validation of the retrieved document content is performed before it enters the agent's context.

gws-docs